Hello Calvin, It would be great if you can list a few actionable items regarding licensing.
https://github.com/apache/incubator-baremaps/issues/492 I did a pass on almost everything before joining the incubator, and had to rewrite or find alternatives to all the problematic GPL dependencies. A second pass made after joining the incubator revealed a few additional issues, but I think we are close from being compliant. In my opinion, the main issue is related to datasets (e.g. openstreetmap files) used in the tests. We added the DISCLAIMER-WIP to acknowledge these issues in the src and binary distributions without blocking the release process. Best regards, Bertil > On 29 Aug 2023, at 18:12, Josh Fischer <j...@joshfischer.io> wrote: > > Calvin, > > You made me think of a license question. With Heron, we kept a separate copy > of all the licenses that were not ALV2 [1]. Is this something that needs to > be done for Baremaps? > > 1. https://github.com/apache/incubator-heron/tree/master/licenses > > - Josh > >> On Aug 29, 2023, at 11:04 AM, Calvin Kirs <k...@apache.org> wrote: >> >> I'll find time tomorrow to list specific checks. >> BTW, we cannot fully rely on rat to indicate whether the license is >> compliant. >> In addition, regarding the modification of source code dependencies, >> we'd better list the specific files in the LICENSE file, otherwise it >> is difficult for us to judge whether this part is compliant. >> >> On Tue, Aug 29, 2023 at 11:31 PM Calvin Kirs <k...@apache.org >> <mailto:k...@apache.org>> wrote: >>> >>> On Tue, Aug 29, 2023 at 10:39 PM Josh Fischer <j...@joshfischer.io> wrote: >>>> >>>> Right now I’m 0. >>>> >>>> I’ve not run across this before, I’m not sure if it’s an issue for the >>>> release. See gpg output below about the key not being certified. This is >>>> the reason my vote is 0 at the moment. >>>> gpg --verify $FILE.asc $FILE >>>> gpg: Signature made Thu Aug 24 07:11:17 2023 CDT >>>> gpg: using RSA key 16D7A0B27D5ADD52BD57932971751399FB39CB84 >>>> gpg: Good signature from "Bertil Chapuis <bchap...@gmail.com>" [unknown] >>>> gpg: WARNING: This key is not certified with a trusted signature! >>> >>> don't worry, it's ok. >>>> >>>> I checked: >>>> - Downloaded; checked hashes/signatures; checked LICENSE, NOTICE, >>>> DISCLAIMER-WIP; compiled and ran tests on OSX, OpenJDK 17, Maven 3.8.4. >>>> - Rat check showed 1441 unapproved licenses. However, since we are a WIP >>>> and I think this issue is known, so we are good. >>>> - I tried to run the example from the tar.gz binary, but the website seems >>>> to refer to the repo - not a release. As an example, the openStreet Map >>>> example wouldn’t work with one of our binary releases. This isn’t a >>>> blocker by any means, just a developer experience idea that I thought >>>> about while checking the release. >>>> >>>> $ cd examples/openstreetmap >>>> $ baremaps workflow execute --file workflow.json >>>> >>>> Because the “examples” folder wasn’t in the binary release I wasn’t sure >>>> how to run the example. >>>> >>>> - Josh >>>> >>>>> On Aug 28, 2023, at 3:20 PM, Bertil Chapuis <bchap...@gmail.com> wrote: >>>>> >>>>> Thank you Josh and Julian. There is no hurry, especially if we can >>>>> increase the duration of the vote. >>>>> >>>>> As we all have busy schedule, I will probably extend future release votes >>>>> to one week in the future. >>>>> >>>>> Best, >>>>> >>>>> Bertil >>>>> >>>>>> On 28 Aug 2023, at 19:07, Julian Hyde <jhyde.apa...@gmail.com> wrote: >>>>>> >>>>>> What Josh said. I’ll review & vote today. Apologies. >>>>>> >>>>>>> On Aug 28, 2023, at 7:42 AM, Josh Fischer <j...@joshfischer.io> wrote: >>>>>>> >>>>>>> I apologize for my absence. I will spend some time looking at it in >>>>>>> the next 24 hours. >>>>>>> >>>>>>> This is one of the fun and challenging parts of working through the >>>>>>> incubator. I’ve had votes go over two weeks before. Our best bet is to >>>>>>> get as many binding (preferably 3) votes on the dev@baremaps list. >>>>>>> It’s often harder to get votes on general@a.o <mailto:general@a.o>. >>>>>>> >>>>>>> >>>>>>> Let’s wait a few more days to get binding votes. Open-source moves at >>>>>>> the speed of open-source, fun! >>>>>>> >>>>>>>> On Aug 28, 2023, at 9:10 AM, Bertil Chapuis <bchap...@gmail.com> wrote: >>>>>>>> >>>>>>>> Hello Everyone, >>>>>>>> >>>>>>>> We don’t have enough vote for publishing our release. Can we extend >>>>>>>> the deadline or should we start a new vote? >>>>>>>> >>>>>>>> I see that some projects, such as Apache Pekko, ask the incubator >>>>>>>> mailing-list to vote for their releases. Should we try to do the same? >>>>>>>> >>>>>>>> Best regards, >>>>>>>> >>>>>>>> Bertil >>>>>>>> >>>>>>>> >>>>>>>>> On 24 Aug 2023, at 14:52, Bertil Chapuis <bchap...@gmail.com> wrote: >>>>>>>>> >>>>>>>>> Hello Everyone, >>>>>>>>> >>>>>>>>> Following our online release party (thank you Leonard and Perdjesk), >>>>>>>>> we have created a build for Apache Baremaps (incubating) 0.7.2, >>>>>>>>> release candidate 1. >>>>>>>>> >>>>>>>>> Thanks to everyone who has contributed to this release. >>>>>>>>> >>>>>>>>> You can read the release notes here: >>>>>>>>> https://github.com/apache/incubator-baremaps/releases/tag/v0.7.2-rc1 >>>>>>>>> >>>>>>>>> The commit to be voted upon: >>>>>>>>> https://github.com/apache/incubator-baremaps/tree/v0.7.2-rc1 >>>>>>>>> >>>>>>>>> Its hash is e917d5b02fdb64c3f715afd449bb1fe9ca5c2f58. >>>>>>>>> >>>>>>>>> Its tag is v0.7.2-rc1. >>>>>>>>> >>>>>>>>> The artifacts to be voted on are located here: >>>>>>>>> https://dist.apache.org/repos/dist/dev/incubator/baremaps/0.7.2-rc1/ >>>>>>>>> >>>>>>>>> The hashes of the artifacts are as follows: >>>>>>>>> d910b50ebed4200d0ef6f0c1ee3e4db0cd95ea005fe54fca66dfc4ec4dca73e96edc8913654c85c73539d6a9d27481157fea9f456a9f3aa451c178a811a89ea0 >>>>>>>>> ./apache-baremaps-0.7.2-incubating-src.tar.gz >>>>>>>>> fda00056b9785bbbb7f966e92cf7e118071f5b6d44f9652176a4626cec38c5b0738933b24e23efef423eafba2111bc6a22e6f00a67fda2f10b0011f9c22f3208 >>>>>>>>> ./apache-baremaps-0.7.2-incubating-bin.tar.gz >>>>>>>>> >>>>>>>>> Release artifacts are signed with the following key: >>>>>>>>> http://people.apache.org/keys/committer/bchapuis.asc >>>>>>>>> https://downloads.apache.org/incubator/baremaps/KEYS >>>>>>>>> >>>>>>>>> The README file for the src distribution contains instructions for >>>>>>>>> building and testing the release. >>>>>>>>> >>>>>>>>> Please vote on releasing this package as Apache Baremaps 0.7.2. >>>>>>>>> >>>>>>>>> The vote is open for the next 72 hours and passes if a majority of at >>>>>>>>> least three +1 PMC votes are cast. >>>>>>>>> >>>>>>>>> [ ] +1 Release this package as Apache Baremaps <version> >>>>>>>>> [ ] 0 I don't feel strongly about it, but I'm okay with the release >>>>>>>>> [ ] -1 Do not release this package because... >>>>>>>>> >>>>>>>>> Here is my vote: >>>>>>>>> >>>>>>>>> +1 (binding): I checked the signatures and the checksums; I built the >>>>>>>>> project from its sources; and checked the binary distribution. >>>>>>>>> >>>>>>>>> Best regards, >>>>>>>>> >>>>>>>>> Bertil Chapuis >>>>>>>> >>>>>>> >>>>>> >>>>>> >>>>>> --------------------------------------------------------------------- >>>>>> To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org >>>>>> For additional commands, e-mail: dev-h...@baremaps.apache.org >>>>>> >>>>> >>>> >>> >>> >>> -- >>> Best wishes！ >>> CalvinKirs >> >> >> >> -- >> Best wishes！ >> CalvinKirs >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: dev-unsubscr...@baremaps.apache.org >> <mailto:dev-unsubscr...@baremaps.apache.org> >> For additional commands, e-mail: dev-h...@baremaps.apache.org >> <mailto:dev-h...@baremaps.apache.org>
signature.asc
Description: Message signed with OpenPGP
